Privacy policy

Controller and contact

FOREST FENCE EOOD, UIC 204906607, DICHO PETROV STR., BL. 42, ENT. B, APT. 14, Smolyan, Bulgaria, operates Vekovia and is responsible for the personal data described here. For privacy requests contact info@vekovia.store.

Legal representative: Martin Hubchev. Email: martin.st.hubchev@gmail.com. Telephone: +359 88 6461793. VAT identification number: BG204906607.

Website, orders and customer service

When you visit, hosting systems process technical request data such as IP address, requested page, time and browser information to serve and protect the website. Our legal basis is our legitimate interest in a reliable and secure service (Article 6(1)(f) GDPR).

When you order, we process your name, contact and delivery details, order contents, payment status and correspondence to perform the contract (Article 6(1)(b)). Payment providers process payment credentials. Accounting and tax records are kept to comply with legal obligations (Article 6(1)(c)). Providing the data necessary to fulfil an order is required for that order; without it we cannot deliver.

Enquiries, withdrawal and cancellation forms are processed to respond, administer the contract and meet consumer-law duties (Articles 6(1)(b) and (c)); correspondence relating to disputes may also be retained for our legitimate interest in establishing or defending legal claims (Article 6(1)(f)). Forms collect name, email, contract reference, the declaration and receipt time. Cancellation reasons are optional; please do not include health information.

Newsletter and advertising choices

Newsletter registration uses your email, language and consent record. Marketing starts only after you confirm your subscription by email. The basis is your consent (Article 6(1)(a) GDPR). Withdraw it at any time through an unsubscribe link or info@vekovia.store, without affecting earlier lawful processing. We retain a minimal suppression record to respect opt-outs and delivery records to administer email and investigate delivery problems.

Optional Meta advertising measurement is disabled unless we activate it and you accept marketing in Privacy settings. Where enabled and consented, Meta Platforms Ireland Limited receives technical browser data and permitted page or checkout events to measure ads; campaign identifiers may be attached to checkout. No optional marketing request is made before consent by our storefront code. Legal basis: consent (Article 6(1)(a) GDPR and applicable device-storage rules). Refusal does not prevent shopping. Withdraw through Privacy settings at any time. Meta may match data to an account and process it under its own privacy policy: https://www.facebook.com/privacy/policy/

Our Shopify checkout uses the Facebook & Instagram by Meta integration with Enhanced data sharing: Meta Pixel, advanced matching and Conversions API. Subject to your marketing consent, this integration can share purchase events, order value and currency, technical identifiers and available customer matching details such as name, email address, telephone number and location with Meta. Conversions API transmits purchase data from Shopify’s servers to Meta’s servers; browser ad blockers do not prevent this server-to-server transmission. These data help attribute purchases to advertising and match activity to Meta accounts. Your marketing choice is passed from our storefront to Shopify when checkout is created; you can also review your privacy choices at checkout.

We do not use the information described here to make solely automated decisions that have legal or similarly significant effects on you.

Service providers and international processing

Our service providers include Shopify for checkout, orders and subscriptions (https://www.shopify.com/legal/privacy), Vercel for website hosting (https://vercel.com/legal/privacy-policy), Supabase for subscription-to-newsletter and order records (https://supabase.com/privacy), and Resend for email delivery (https://resend.com/legal/privacy-policy). Carriers receive delivery details; payment providers receive the data needed for payment. Professional advisers and public authorities receive information where necessary for accounting, claims or legal duties.

Providers may process data outside the European Economic Area, including in the United States. Where such transfers occur, the applicable provider arrangements must rely on an adequacy decision or appropriate safeguards such as EU standard contractual clauses. You may contact us for the safeguards applicable to your data and a copy of relevant information. We do not promise that all data stays in the EU.

How long we keep data

Retention depends on purpose and applicable duties. Order, invoice and tax records are retained for the statutory accounting/tax period applicable to the record. Customer correspondence and cancellation or withdrawal notices are retained while needed to resolve the request and establish or defend related claims; applicable limitation periods and ongoing disputes determine any further retention. We delete or anonymise records once these grounds no longer apply.

Newsletter data is used while your consent is active. Following withdrawal, marketing stops; only data needed to document the consent history, respect suppression or resolve a dispute is retained for those purposes. Technical logs are retained only as needed for operation, security and investigation. Browser-storage durations are listed in the Cookie policy.

Your rights

You may request access, correction, erasure, restriction and portability where the legal conditions apply. You may object to processing based on legitimate interests on grounds relating to your situation, and object to direct marketing at any time. You may withdraw consent without affecting processing before withdrawal. Contact info@vekovia.store; we may request proportionate proof of identity. We normally respond within one month; legally permitted extensions will be explained.

You may complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria (https://cpdp.bg/en/lodging-complaints-and-alerts/), or your local supervisory authority. You do not have to contact us before making a complaint.